Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231342e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3231342e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          4E+H3F6f6UiDlC4xwFu38LWk7W7eLPuYIrQUynX/6FE=
Subject key identifier:   1D:1E:1F:36:82:C1:98:4E:AD:B1:B3:9C:53:4C:E2:E9:09:88:D3:65
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       61BEACAFD7BCB6583C928CFFE164CD86AD77C6F4
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231342e302f32332d3233203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:21 +0000
ROA not before:           Thu 07 Nov 2024 20:49:21 +0000
ROA not after:            Thu 06 Nov 2025 20:54:21 +0000
asID:                     53054
IP address blocks:        187.73.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:be:ac:af:d7:bc:b6:58:3c:92:8c:ff:e1:64:cd:86:ad:77:c6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:21 2024 GMT
            Not After : Nov  6 20:54:21 2025 GMT
        Subject: CN=1D1E1F3682C1984EADB1B39C534CE2E90988D365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b5:37:36:e2:89:39:60:b0:94:a8:c0:bd:d0:
                    3f:c5:26:d5:b1:87:f7:a7:b5:1d:bd:a9:c9:e0:15:
                    2d:af:aa:c8:1c:1c:c3:b2:da:cf:aa:8c:89:d5:d0:
                    65:7c:55:e6:14:ca:af:3b:ec:1e:f5:3a:72:17:c0:
                    6a:a1:4e:fd:e0:b1:b0:d7:1a:d7:69:60:4b:19:64:
                    44:d1:95:c6:d0:c7:82:c8:d4:2e:51:44:b2:b9:fd:
                    41:a1:d2:2b:9c:17:9b:cd:61:d2:f8:1d:9f:5e:71:
                    34:25:2c:a2:ac:b7:3e:a6:5a:19:6d:d9:31:03:84:
                    7d:e4:ea:c5:7e:bf:e6:cc:52:09:f9:ef:fd:66:7a:
                    89:ec:fe:3b:66:7b:3b:64:e0:98:4e:66:23:f5:49:
                    7d:1c:91:85:5d:46:b9:05:22:73:85:18:9d:31:1b:
                    c7:31:e7:61:49:2b:00:6b:7c:ea:3b:bb:26:da:a9:
                    be:5e:42:21:af:38:1b:d6:22:0b:4c:60:b1:7c:e8:
                    97:e4:9b:e4:37:dd:3d:e8:01:5d:fb:57:05:73:eb:
                    76:ff:c9:e8:39:ef:77:66:7d:ff:f1:80:4b:5c:20:
                    f9:53:a2:dd:bf:bc:fa:a6:41:bf:3f:81:e1:2e:fe:
                    0d:12:1b:b2:38:1f:e0:9b:c3:fd:0b:1d:46:f3:de:
                    37:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1E:1F:36:82:C1:98:4E:AD:B1:B3:9C:53:4C:E2:E9:09:88:D3:65
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231342e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:53:f3:8d:36:b7:0c:d1:19:94:dd:98:71:68:a5:2b:e5:12:
         8c:5c:da:4f:34:5d:ba:ca:0d:5a:5e:92:75:6c:6b:a0:8d:61:
         06:70:d6:e2:b2:c0:89:cf:34:ea:3f:0b:1c:02:a9:93:a6:11:
         cc:70:5b:cf:72:34:d1:09:39:69:72:ee:d0:bb:8e:03:67:39:
         34:0a:64:2c:21:7c:72:87:32:ea:f2:0a:b5:40:1a:94:ed:88:
         f1:cd:09:67:73:88:37:60:97:a7:4f:22:3c:60:4a:8c:84:2d:
         84:94:19:a2:e7:3a:ba:6a:9e:22:6f:1b:00:35:c3:bb:ac:43:
         e3:c2:79:e8:b8:fe:38:de:3c:60:21:ad:77:17:d9:02:5e:a6:
         01:eb:fc:77:c3:6a:94:28:66:c2:c2:6a:8c:0d:b5:cb:19:83:
         2f:f5:65:5b:1c:f1:43:ed:55:95:49:23:4d:3d:01:1e:d1:a2:
         e9:88:c5:0d:d3:2b:17:f8:21:59:8b:6f:b4:5e:6f:c7:bc:f1:
         a1:a5:7a:b8:50:29:19:35:d8:9d:73:74:9a:39:1c:70:5d:b0:
         cf:f8:02:95:c4:40:09:2b:10:a6:d6:a8:7d:cb:3d:fc:45:b5:
         3c:08:9f:c4:07:d7:54:cc:ac:ab:96:5f:87:47:d6:3a:56:a6:
         a3:45:93:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org